activity
20212026
most citedDarkDNS: Revisiting the Value of Rapid Zone Update

5 citations · 11 across the 11 of their papers we have counts for

collaborators

11 papers

cs.NI2026★ 1 cited

Locating and Enumerating Anycast: a Comparison of Two Approaches

Remi Hendriks, Tim Betzer, Ben Du +3

Anycast allows for providing services from multiple, geographically distant Points of Presence (PoPs), using a single IP address, to, e.g., improve resilience. Due to its opaquenes…

cs.NI2026

Spoofer or Spoofers? Estimating a Lower Bound on the Number of DRDoS Sources Using Anycast Honeypots

Bernhard Degen, Bas Palinckx, Mattijs Jonker +2

DDoS attacks remain a significant threat, with distributed reflection denial-of-service (DRDoS) attacks being particularly difficult to trace back to their sources. To better under…

cs.CR2026

Zombies in Alternate Realities: The Afterlife of Domain Names in DNS Integrations

Sulyab Thottungal Valapu, John Heidemann, Mattijs Jonker +1

DNS integrations leverage the discovery, trust, and uniqueness of the global Domain Name System with a linkage to another naming ecosystem, so the DNS name can help identify resour…

cs.NI2025★ 2 cited

LACeS: An Open, Fast, Responsible, and Efficient Longitudinal Anycast Census System

Remi Hendriks, Matthew Luckie, Mattijs Jonker +2

IP anycast replicates an address at multiple locations to reduce latency and enhance resilience. Due to anycast's crucial role in the modern Internet, earlier research introduced t…

cs.NI2025★ 1 cited

Load-Balancing versus Anycast: A First Look at Operational Challenges

Remi Hendriks, Mattijs Jonker, Roland van Rijswijk-Deij +1

Load Balancing (LB) is a routing strategy that increases performance by distributing traffic over multiple outgoing paths. In this work, we introduce a novel methodology to detect…

cs.CR2025

Registration, Detection, and Deregistration: Analyzing DNS Abuse for Phishing Attacks

Kyungchan Lim, Raffaele Sommese, Mattis Jonker +3

Phishing continues to pose a significant cybersecurity threat. While blocklists currently serve as a primary defense, due to their reactive, passive nature, these delayed responses…

cs.NI2024★ 5 cited

DarkDNS: Revisiting the Value of Rapid Zone Update

Raffaele Sommese, Gautam Akiwate, Antonia Affinito +3

Malicious actors exploit the DNS namespace to launch spam campaigns, phishing attacks, malware, and other harmful activities. Combating these threats requires visibility into domai…

cs.NI2023

This Is a Local Domain: On Amassing Country-Code Top-Level Domains from Public Data

Raffaele Sommese, Roland van Rijswijk-Deij, Mattijs Jonker

Domain lists are a key ingredient for representative censuses of the Web. Unfortunately, such censuses typically lack a view on domains under country-code top-level domains (ccTLDs…

cs.NI2023★ 1 cited

Assessing Network Operator Actions to Enhance Digital Sovereignty and Strengthen Network Resilience: A Longitudinal Analysis during the Russia-Ukraine Conflict

Muhammad Yasir Muzayan Haq, Abhishta Abhishta, Raffaele Sommese +2

We conduct longitudinal and temporal analyses on active DNS measurement data to investigate how the Russia-Ukraine conflict impacted the network infrastructures supporting domain n…

cs.NI2022★ 1 cited

Saving Brian's Privacy: the Perils of Privacy Exposure through Reverse DNS

Olivier van der Toorn, Raffaele Sommese, Anna Sperotto +2

Given the importance of privacy, many Internet protocols are nowadays designed with privacy in mind (e.g., using TLS for confidentiality). Foreseeing all privacy issues at the time…

cs.NI2021

Hosting Industry Centralization and Consolidation

Luciano Zembruzki, Raffaele Sommese, Lisandro Zambenedetti Granville +3

There have been growing concerns about the concentration and centralization of Internet infrastructure. In this work, we scrutinize the hosting industry on the Internet by using ac…